Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/1/3133312e37322e33362e302f32342d3234203d3e203631373232.roa
File:                     3133312e37322e33362e302f32342d3234203d3e203631373232.roa (raw, json)
Hash identifier:          k1dC3xfu8o2NXXNix0EUPHo6OQpo5wtlH8bLOXoSouM=
Subject key identifier:   52:08:B3:1E:DE:44:70:75:A3:9A:88:F9:9C:62:05:54:A4:A4:CE:7D
Certificate issuer:       /CN=29125A50D39B1ABC3BAB97495F6B1E715B8ACB8D
Certificate serial:       49C26AA2CE0FD5908EECE521240D294D9977A3EB
Authority key identifier: 29:12:5A:50:D3:9B:1A:BC:3B:AB:97:49:5F:6B:1E:71:5B:8A:CB:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29125A50D39B1ABC3BAB97495F6B1E715B8ACB8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/1/3133312e37322e33362e302f32342d3234203d3e203631373232.roa
Signing time:             Thu 04 Apr 2024 22:34:32 +0000
ROA not before:           Thu 04 Apr 2024 22:29:32 +0000
ROA not after:            Thu 03 Apr 2025 22:34:32 +0000
asID:                     61722
IP address blocks:        131.72.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/1/29125A50D39B1ABC3BAB97495F6B1E715B8ACB8D.crl
                          rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/1/29125A50D39B1ABC3BAB97495F6B1E715B8ACB8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29125A50D39B1ABC3BAB97495F6B1E715B8ACB8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:49:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c2:6a:a2:ce:0f:d5:90:8e:ec:e5:21:24:0d:29:4d:99:77:a3:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29125A50D39B1ABC3BAB97495F6B1E715B8ACB8D
        Validity
            Not Before: Apr  4 22:29:32 2024 GMT
            Not After : Apr  3 22:34:32 2025 GMT
        Subject: CN=5208B31EDE447075A39A88F99C620554A4A4CE7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:44:0e:1d:5f:ac:b8:08:2b:bc:5f:2b:38:f1:
                    94:ef:91:de:89:a4:03:4f:68:12:ec:62:6c:99:2a:
                    bf:c9:41:cd:97:d4:ce:d2:c8:c4:7d:9d:98:a2:3b:
                    4f:a9:12:f6:74:a6:33:f1:49:e6:c6:74:1c:dc:6f:
                    83:9a:89:da:69:e1:71:98:fd:4b:b8:da:c4:ea:cf:
                    9c:ee:15:d1:2b:85:62:29:e3:97:28:03:98:8e:d5:
                    e5:75:61:77:6d:92:8a:8f:62:4d:e8:b6:21:4b:3a:
                    74:b2:69:22:ad:09:9c:05:43:9b:f2:76:c8:61:71:
                    89:30:4f:42:46:81:83:10:c6:77:92:bd:d8:3d:64:
                    8b:46:ed:cd:c1:13:ac:a4:13:f0:0f:ae:50:6b:b8:
                    0b:ec:8d:34:32:3a:d9:14:b0:dd:cf:c5:38:23:45:
                    33:5b:62:45:a8:a7:02:4c:08:94:b1:8f:02:b9:58:
                    a2:74:d4:5c:66:27:73:70:0b:a8:1d:f0:3b:24:33:
                    ea:a4:3f:31:f0:c9:b8:24:61:43:96:df:5a:e5:b8:
                    ad:24:49:1c:80:61:5c:84:2e:f3:11:0e:3d:2c:57:
                    89:ad:87:d2:a3:a7:cc:5d:e3:aa:59:79:a9:c6:cf:
                    f3:e8:77:b7:30:01:bb:9e:9a:4c:55:b8:5c:a3:d0:
                    ed:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:08:B3:1E:DE:44:70:75:A3:9A:88:F9:9C:62:05:54:A4:A4:CE:7D
            X509v3 Authority Key Identifier:
                keyid:29:12:5A:50:D3:9B:1A:BC:3B:AB:97:49:5F:6B:1E:71:5B:8A:CB:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/1/29125A50D39B1ABC3BAB97495F6B1E715B8ACB8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29125A50D39B1ABC3BAB97495F6B1E715B8ACB8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/1/3133312e37322e33362e302f32342d3234203d3e203631373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:b5:e4:d0:04:9c:8e:53:e2:97:45:14:1c:61:d8:55:d1:a7:
         5c:24:bc:b9:7b:04:6f:4b:50:4a:cd:83:3a:47:65:2a:d2:3b:
         1b:2a:6c:b4:20:8b:8d:ed:e4:c7:35:82:18:d2:da:f7:69:39:
         53:5f:75:42:71:d6:3f:1c:33:c6:fc:94:bf:97:bf:3e:21:df:
         8d:ef:32:13:6b:fd:9a:49:49:f5:a9:af:0b:68:b9:95:a4:d7:
         7b:9b:a1:cd:a4:7f:16:6e:8a:01:90:4c:ca:94:eb:88:da:a5:
         77:9e:83:78:09:f6:b1:a0:73:34:04:38:1b:63:51:a8:cc:35:
         fa:9e:c6:70:57:2f:7b:c0:86:60:f1:c6:f4:7b:fa:8d:3d:34:
         6d:0d:e3:bd:87:02:c6:bf:c2:bc:2b:48:25:67:3a:48:93:0b:
         e7:fd:df:4c:29:c4:7d:7e:f0:79:4d:5f:94:52:ae:79:32:11:
         65:c0:0e:8f:59:38:4f:d3:6b:48:e4:61:d6:0f:c5:f8:9b:89:
         45:0e:09:30:46:c3:25:58:30:8a:fd:63:1d:06:db:bc:7d:1a:
         e4:15:33:2e:d4:62:d6:d3:01:b2:69:ee:ea:09:34:cc:40:5c:
         40:12:eb:47:f2:94:99:f5:ff:d9:82:09:23:97:52:aa:85:64:
         c8:5a:e4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:31 2024 by rpki-client on console-ams.rpki-client.org